Who does what
Provider
- Investigate GravityZone alerts around the clock
- Hunt threats across licensed telemetry
- Execute enabled pre-approved containment actions
Your team
- Define allowed actions and business exceptions
- Maintain licensed GravityZone and XDR coverage
- Complete remediation, recovery and user communication
Coverage
- Endpoints
- Cloud Workloads
- Identity & Access
- Network
- SaaS Applications
Details
Service scope
Best for GravityZone buyers wanting analysts to investigate and contain endpoint threats
Licensed coverage
SOC coverage depends on licensed GravityZone and XDR sources. Compliance Manager includes a basic standard, with advanced frameworks requiring an add-on license.
Response permissions
Analysts can isolate hosts, block files and act on email or identity when licensed and pre-approved. You retain recovery.
Warranty terms
Warranty eligibility and event limits depend on package, endpoint count and accepted terms. It does not replace cyber insurance.
Full service analysis
Bitdefender MDR is a managed detection and response service delivered through Bitdefender's GravityZone platform and global SOCs. After a confirmed alert, analysts investigate and can take pre-approved containment actions, while the buyer still owns scope, approvals, recovery, business decisions and work outside the licensed GravityZone coverage.
- Your team owns
- Choosing the MDR or MDR PLUS scope and enabling the required GravityZone coverage
- Defining pre-approved actions, emergency contacts and business exceptions
- Remediation, recovery and user communication after containment
- Coverage for tools, clouds and logs outside the licensed GravityZone and XDR scope
Response boundary
Bitdefender supports the Contain threats lane because official documentation lists SOC-operated pre-approved actions such as host isolation, file blocking, email deletion and user disablement. It should not be treated as full SOC outsourcing because the buyer still chooses the action policy, keeps contacts current and owns recovery work beyond the scoped service.
Warranty caveat
The current breach warranty FAQ says MDR includes up to $100,000 for ransomware events, while MDR PLUS and some larger MDR customers may receive up to $1,000,000 across specified event categories. The warranty is tied to terms and underwriting, so it is a package detail to validate rather than a blanket service outcome.
Compliance caveat
MDR licenses provide access to a basic Compliance Manager standard. Frameworks such as CMMC, HIPAA, ISO 27001 and SOC 2 require an add-on license. The tool assesses endpoint posture and does not replace an audit or make the buyer compliant.
Pricing & contract
- Billing
- Tiered, Custom
Request a quote for MDR or MDR PLUS, endpoint count and XDR sensors. Advanced Compliance Manager standards require an add-on license. MSP packaging and support terms are handled through the partner channel.
Tradeoffs & buying questions
Strengths
-
Direct containment when pre-approved actions are enabled
Analysts can contain threats directly when pre-approved actions are enabled
-
GravityZone-native delivery simplifies ownership for existing users
GravityZone-native service can simplify ownership for buyers already using Bitdefender
-
MITRE Managed Services evaluation available for buyer review
Official MITRE Managed Services material gives buyers a concrete third-party evaluation artifact to review
-
Compliance Manager can support endpoint posture checks, with advanced frameworks licensed separately
Considerations
-
Another EDR may require adding or replacing GravityZone
Buyers committed to another EDR should confirm whether replacing or adding GravityZone is required
-
Compare current packages through scoped quotes
Public list pricing is not available, so shortlist comparisons depend on quotes
-
Warranty conditions vary and do not replace insurance
Breach warranty limits and eligibility differ by package and are not a replacement for cyber insurance
-
Buyer retains coverage outside licensed GravityZone and XDR
Coverage outside licensed GravityZone and XDR sources remains the buyer's responsibility
Ask before buying
- Which response actions are enabled, optional or subject to explicit approval?
- Does our package include XDR sensors, Compliance Manager and breach warranty eligibility?
- Which endpoint, identity, email, network and cloud sources does the SOC actively monitor?
Integrations
Endpoint
- GravityZone endpoint protection and EDR
Other integrations
- GravityZone Defense XDR sensors
- Microsoft productivity and identity response actions when licensed
- MDR Portal
1 more integrations
- RMM and PSA workflows for MSP service delivery
Common questions
How much does Bitdefender MDR cost?
MDR and MDR PLUS require a scoped quote. Confirm the endpoint count, XDR sensors, MSP channel terms and any separately licensed Compliance Manager standards. Public reseller rates can describe older or different packages.
What happens after Bitdefender MDR confirms an incident?
Bitdefender SOC analysts investigate the alert and can take enabled pre-approved actions such as stopping a malicious process, blocking a file or IP, isolating a host, deleting malicious email, disabling a user or forcing a credential reset. The buyer still owns action approvals, recovery and any systems outside the licensed scope.
Does Bitdefender MDR include a breach warranty?
Bitdefender says MDR and MDR PLUS customers can receive breach warranty coverage at no additional cost after accepting warranty terms. The current FAQ lists up to $100,000 for MDR ransomware events and up to $1,000,000 for MDR PLUS or eligible larger MDR customers, so buyers should verify the package and conditions in the contract.
Company details
- Headquarters
- Bucharest, Romania
- Founded
- 2001
- SOC regions
- North America, Europe / UK, APAC